Forcepoint-Websense supports SPF email authentication protocol. For sending DMARC compliant emails via Forcepoint, you would need to verify your domain on your Forcepoint account and publish a DNS TXT record that includes Forcepoint. Follow the steps below:
Sign-in to your DNS registrar’s control panel
Select My Account. From the menu and select Domains
Expand the Domains and select Manage DNS for the domain that needs to be verified.
In the DNS for your domain, go to the Records section and click on Add. Add your SPF record based on the specifications suggested below:
TXT record specifications:
Type: TXT
Host: @
Value: v=spf1 include:mailcontrol.com ~all
Note: Select an SPF failure mode that is suitable for you and modify your record based on it.
~all results in a soft fail (not authorized, but not explicitly unauthorized); -all results in a hard fail (unauthorized); ?all is neutral (similar to no policy)
Click on Save and wait. Your DNS would take 24 hours to process these changes.